Medium
DynamoDB
Regional
DynamoDB Accelerator (DAX) clusters should be encrypted at rest
NISTISO 27001
Description
This control checks whether a DAX cluster is encrypted at rest. Encrypting data at rest reduces the risk of data stored on disk being accessed by unauthorized users.
Remediation
To enable encryption at rest for DAX clusters, you must recreate the cluster with encryption enabled.
Steps
- Open the DAX console.
- Recreate the cluster with encryption at rest enabled.
Compliance
NISTISO 27001